Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
File:                     296B5A42104756A14E2651E7EAC81D02EA0F7531.cer (raw, json)
Hash identifier:          1fOO504lgdTCMLWGtNC8lCkgJ08Fv559R7NJ1wPjYg0=
Subject key identifier:   29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       548D741B16E892052756F70A0645AD76AD9D0E0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 01:18:30 +0000
Certificate not after:    Thu 05 Mar 2026 01:23:30 +0000
Subordinate resources:    AS: 270690
                          IP: 181.225.156.0/22
                          IP: 190.120.32.0/22
                          IP: 2804:6fe0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:8d:74:1b:16:e8:92:05:27:56:f7:0a:06:45:ad:76:ad:9d:0e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 01:18:30 2025 GMT
            Not After : Mar  5 01:23:30 2026 GMT
        Subject: CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:0d:12:0b:15:81:d6:36:42:af:cb:46:eb:
                    93:ba:a4:c1:9a:30:81:32:66:50:fa:ae:ad:43:6b:
                    14:82:4c:69:13:9a:99:8e:2e:0d:2e:9e:a3:88:a0:
                    e6:15:18:5c:33:97:a4:66:d9:e2:a3:8a:3a:db:b2:
                    66:46:db:0f:0a:42:cb:4a:59:73:fe:f7:d2:50:91:
                    81:3e:31:9b:bb:b1:a8:0e:0d:2f:de:88:aa:6f:c1:
                    27:69:34:b9:26:d1:75:3c:9e:a9:30:53:05:7a:ac:
                    c8:ef:d4:d5:47:50:b2:a9:90:cd:54:18:2a:c4:e0:
                    17:33:dc:20:6b:19:d4:3f:ba:f6:de:63:b7:33:72:
                    9a:3f:45:02:7d:3c:55:75:ed:dd:71:76:fc:59:3e:
                    9a:94:13:bc:75:e9:ce:33:63:2e:2c:b0:a7:86:b1:
                    6a:0e:c7:72:bb:29:b8:35:ca:e7:d0:b2:11:87:2e:
                    3e:75:ff:b3:8f:49:e3:32:7c:3b:fe:45:cd:88:4e:
                    94:28:fa:38:65:8b:8c:31:ff:0d:d1:55:83:85:b7:
                    cc:33:bc:a0:2a:3e:86:90:eb:39:d1:e5:58:de:1c:
                    9a:1b:a2:fc:9c:b7:f9:4b:b6:63:d9:f9:ea:ad:35:
                    cf:97:f3:8a:a0:1b:38:58:32:30:32:9e:0c:42:c9:
                    53:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.156.0/22
                  190.120.32.0/22
                IPv6:
                  2804:6fe0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270690

    Signature Algorithm: sha256WithRSAEncryption
         b6:73:73:30:a3:f0:f9:97:87:a9:f9:0c:08:6e:cb:95:fa:5c:
         19:6d:f4:5e:9a:dc:2d:de:e3:19:3f:71:11:2e:3a:ad:97:33:
         ba:3a:d4:ec:85:98:00:e9:1c:a5:ba:ef:4a:2a:6f:36:55:67:
         47:c5:3d:38:8a:b1:ba:6b:b1:e2:69:87:a1:3d:f1:68:ff:36:
         fa:fc:e7:a2:f1:f1:68:a0:91:3a:bd:4f:39:7d:04:c7:53:b2:
         ec:ba:99:39:da:c4:29:08:46:ec:cd:83:68:07:ba:e5:ca:35:
         66:2c:2f:32:a1:fb:3a:72:19:64:ef:77:f8:b9:bf:48:cd:a8:
         58:c6:b8:e1:d6:7a:51:83:92:54:a9:bd:fb:b1:9d:64:3d:b3:
         31:f6:8f:78:a3:19:7a:b6:65:2f:4e:2d:4d:75:e7:97:72:19:
         64:8f:87:94:f7:c0:5f:f8:53:f5:25:03:41:c7:04:e7:a4:8c:
         a6:b4:f8:81:72:70:31:cb:7c:20:b6:61:1f:79:14:42:b0:22:
         81:d3:49:12:ba:00:40:9d:7b:73:57:2f:b3:23:23:e3:a9:1a:
         63:89:4b:62:07:e3:34:3a:28:85:da:64:e5:c0:22:ef:6a:6e:
         ee:f7:0b:23:20:e4:05:1f:94:a6:a4:d4:f8:cd:bf:2f:5a:e6:
         29:fd:62:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:38:16 2025 by rpki-client